1. Introduction UAB „Britų verslo kolegija“, operating under the name British Business College (Britų Verslo Kolegija), respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. This Privacy Policy explains what personal data we may collect through our website, why we process it, how it may be used, and what rights you have. 2. Data Controller The data controller responsible for the processing of personal data described in this Privacy Policy is: Legal name: UAB „Britų verslo kolegija“ Company registration number: 302787361 Trading name: British Business College (Britų Verslo Kolegija) Email for privacy-related enquiries:brituverslokolegija@gmail.com Address: Laisvės al. 85E-5, Kaunas, Lithuania, LT-44297 3. Personal Data We May Collect Depending on how you use our website and communicate with us, we may collect the following categories of personal data:
Contact information: your name, email address, telephone number and other contact details you choose to provide.
Course enquiry information: the programme you are interested in, your message and information relevant to your enquiry or application.
Communication records: messages and correspondence you send to us, together with our responses.
Technical information: limited technical information that may be processed when you access the website, such as your IP address, browser type, device information and server logs, where collected by the website infrastructure or service providers.
Cookie-related information: information collected through cookies or similar technologies, where such technologies are used.
Please do not submit sensitive personal information through the website unless it is specifically requested and there is an appropriate legal basis for processing it. 4. How We Use Personal Data We may process personal data for the following purposes:
to respond to questions and requests about our courses;
to provide information about our educational programmes;
to communicate with prospective students and applicants;
to process and manage applications or other requests you submit;
to maintain, operate and secure our website;
to comply with applicable legal obligations;
to establish, exercise or defend legal claims where necessary.
We will not use personal data for unrelated purposes without an appropriate legal basis. 5. Legal Basis for Processing We process personal data only where a lawful basis under the GDPR applies. Depending on the circumstances, this may include:
Pre-contractual steps: responding to your request for information and taking steps at your request before entering into an agreement.
Contractual necessity: processing necessary to enter into or perform an agreement with you.
Legal obligations: processing necessary to comply with applicable legal requirements.
Legitimate interests: processing necessary for our legitimate interests, such as responding to communications, administering our activities and maintaining website security, provided that your rights and freedoms do not override those interests.
Consent: processing based on your consent where consent is the appropriate legal basis, including for certain optional cookies or marketing activities where applicable.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. 6. Sharing of Personal Data We do not sell your personal data. Where necessary for the purposes described in this Policy, personal data may be processed by service providers acting on our behalf. These may include website hosting and infrastructure providers, website form providers, email or communication service providers, and other technical service providers. For example, our website is built using the Tilda website platform. Depending on the website configuration and services used, personal data submitted through the website or technical information generated during a visit may be processed by relevant service providers. We require personal data to be handled in accordance with applicable data protection requirements. Where a service provider processes personal data on our behalf, the relevant contractual and legal safeguards must apply. We may also disclose personal data where required by law, where necessary to respond to lawful requests from public authorities, or where necessary to establish, exercise or defend legal claims. If we introduce additional third-party services, such as analytics or communication tools, we will review the applicable privacy requirements and update this Policy where necessary. 7. International Data Transfers Some service providers may process personal data outside the European Economic Area (EEA). Where personal data is transferred to a country outside the EEA and the GDPR requires safeguards for that transfer, we will ensure that an appropriate transfer mechanism is in place, such as an adequacy decision or suitable contractual safeguards. Further information about relevant transfers and safeguards may be requested using the contact details provided in this Policy. 8. Data Retention We retain personal data only for as long as necessary for the purposes for which it was collected, including responding to enquiries, managing applications and communications, complying with legal obligations, and resolving disputes. The applicable retention period depends on the type of information, the purpose of processing, legal requirements and the need to establish or defend legal claims. When personal data is no longer required, we will delete it or anonymise it where appropriate, subject to applicable legal retention obligations and technical arrangements with service providers. 9. Cookies and Similar Technologies Our website may use cookies or similar technologies to support essential website functions, remember preferences, understand website usage or provide other website features. Essential cookies may be used where necessary for the operation and security of the website. If we introduce non-essential cookies or similar technologies, such as analytics, functionality or marketing tools, we will provide relevant information and obtain consent where required by applicable law before activating those technologies. You may also be able to manage or delete cookies through your browser settings. Disabling certain cookies may affect website functionality. The cookies and technologies actually used may change as the website develops. This Policy will be updated where necessary to reflect material changes. 10. Data Security We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. However, no website or method of electronic transmission can be guaranteed to be completely secure. We cannot guarantee absolute security of information transmitted over the internet. 11. Your Data Protection Rights Subject to the conditions and exceptions provided by the GDPR, you may have the right to:
Access: request confirmation of whether we process your personal data and obtain a copy of it.
Rectification: request correction of inaccurate or incomplete personal data.
Erasure: request deletion of your personal data where the legal conditions for erasure are met.
Restriction: request restriction of processing in certain circumstances.
Objection: object to processing where the right to object applies, including processing based on our legitimate interests.
Data portability: receive certain personal data in a structured, commonly used and machine-readable format and transmit it to another controller, where this right applies.
Withdraw consent: withdraw consent at any time where processing is based on consent.
Lodge a complaint: submit a complaint to a competent data protection supervisory authority.
These rights are not absolute and may be subject to legal conditions or exceptions. For example, we may need to retain certain information to comply with legal obligations or establish, exercise or defend legal claims. How to Exercise Your Rights To make a request concerning your personal data, contact us at: brituverslokolegija@gmail.com Please describe your request clearly. We may request additional information where reasonably necessary to verify your identity and protect your personal data. We will respond without undue delay and, in general, within one month of receiving your request. Where permitted by the GDPR, this period may be extended by up to two additional months in view of the complexity or number of requests. If an extension is necessary, we will inform you within the applicable period. If we cannot comply with your request, we will explain the reasons where required by law and inform you of the applicable options for lodging a complaint or seeking a judicial remedy. 12. Right to Lodge a Complaint If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority. In Lithuania, the supervisory authority is: State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) Website: https://vdai.lrv.lt/en/ Address: L. Sapiegos str. 17, LT-10312 Vilnius, Lithuania You may contact us first at brituverslokolegija@gmail.com so that we can review your concern. However, contacting us first does not remove your right to lodge a complaint with the supervisory authority. 13. Third-Party Websites Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of websites that we do not operate. We recommend reviewing the privacy policies of those websites before providing personal information. 14. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements or data processing practices. The latest version will be published on this page, together with the date of the most recent update. 15. Contact Us If you have questions about this Privacy Policy or how your personal data is processed, please contact: UAB „Britų verslo kolegija“ British Business College (Britų Verslo Kolegija) Email: brituverslokolegija@gmail.com Address: Laisvės al. 85E-5, Kaunas, Lithuania, LT-44297
